Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/323830343a62343a3a2f33322d3438203d3e203238323934.roa
File:                     323830343a62343a3a2f33322d3438203d3e203238323934.roa (raw, json)
Hash identifier:          OMU3qDOLiqHl/J7uOEOXgepSVPipJfDQZJfqpfhNJWw=
Subject key identifier:   55:C8:74:B0:CF:CC:2B:32:E7:75:B6:EA:D2:87:9B:26:BB:19:16:94
Certificate issuer:       /CN=77F99B6CA31CA48560A700A53D4385030C475345
Certificate serial:       7F5A69B5533608157AB4386A23A608D9802AE7FA
Authority key identifier: 77:F9:9B:6C:A3:1C:A4:85:60:A7:00:A5:3D:43:85:03:0C:47:53:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77F99B6CA31CA48560A700A53D4385030C475345.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/323830343a62343a3a2f33322d3438203d3e203238323934.roa
Signing time:             Thu 11 Jul 2024 11:56:56 +0000
ROA not before:           Thu 11 Jul 2024 11:51:56 +0000
ROA not after:            Thu 10 Jul 2025 11:56:56 +0000
asID:                     28294
IP address blocks:        2804:b4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/77F99B6CA31CA48560A700A53D4385030C475345.crl
                          rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/77F99B6CA31CA48560A700A53D4385030C475345.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77F99B6CA31CA48560A700A53D4385030C475345.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 09:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:5a:69:b5:53:36:08:15:7a:b4:38:6a:23:a6:08:d9:80:2a:e7:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F99B6CA31CA48560A700A53D4385030C475345
        Validity
            Not Before: Jul 11 11:51:56 2024 GMT
            Not After : Jul 10 11:56:56 2025 GMT
        Subject: CN=55C874B0CFCC2B32E775B6EAD2879B26BB191694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:06:2e:27:61:a6:4b:2a:2b:95:09:bd:fa:aa:
                    0b:b0:2c:a8:7e:b3:e0:cf:d3:9e:cf:1b:6f:27:65:
                    7c:7a:af:32:80:ae:04:3f:f8:e4:e5:a5:d6:1d:e7:
                    ff:7b:4c:c7:48:d3:8b:93:7b:87:66:f8:4d:47:9e:
                    9b:37:a9:50:fa:05:35:31:de:b7:c8:70:e2:39:40:
                    54:c3:a2:81:01:5d:79:21:40:b3:6e:c6:8a:9b:c7:
                    df:3b:34:80:f5:e6:2a:eb:37:71:a5:0d:b7:2b:e1:
                    af:bc:1b:4b:25:c5:e4:11:ad:e1:4b:52:06:80:93:
                    65:c7:6b:d6:1e:3a:b4:94:b5:9c:25:dd:4d:d2:75:
                    aa:bb:32:65:2d:ae:72:57:2b:bf:bd:f7:da:b6:0a:
                    29:43:40:73:88:14:bd:d4:f3:e1:4f:3d:15:f6:4d:
                    52:86:f2:cb:03:5a:96:54:84:0b:6c:c9:a7:55:6c:
                    4b:e1:39:26:f5:31:6c:bb:0e:ba:43:f1:86:93:f4:
                    2a:84:20:ed:e6:29:e6:5e:9f:4a:e1:e6:38:b3:65:
                    02:c8:fc:ae:07:1f:0e:5c:02:4a:3c:64:55:39:03:
                    2c:af:b9:c7:3a:58:11:62:1d:4e:c5:86:ed:f6:11:
                    fe:38:05:6a:c4:0d:50:09:02:53:5a:b7:73:1b:b7:
                    96:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C8:74:B0:CF:CC:2B:32:E7:75:B6:EA:D2:87:9B:26:BB:19:16:94
            X509v3 Authority Key Identifier:
                keyid:77:F9:9B:6C:A3:1C:A4:85:60:A7:00:A5:3D:43:85:03:0C:47:53:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/77F99B6CA31CA48560A700A53D4385030C475345.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77F99B6CA31CA48560A700A53D4385030C475345.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/323830343a62343a3a2f33322d3438203d3e203238323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:a8:96:46:71:93:40:06:db:19:b4:c6:e1:c0:33:d1:82:25:
         b8:3e:e1:5f:19:80:a3:66:1c:db:bf:87:30:8a:1c:2a:54:11:
         20:34:ed:f2:07:7c:9a:69:86:a9:cf:e4:98:ea:05:22:bc:64:
         65:0d:17:4a:0a:74:0a:54:9a:ed:3b:05:96:c7:4b:18:c3:64:
         7a:92:f4:9b:40:18:b6:61:df:21:e9:f4:66:b7:3e:6d:12:0e:
         85:98:e5:67:dc:a0:92:0f:0c:3a:a0:ec:87:da:76:3b:7a:b6:
         7d:87:07:d3:b0:10:88:e4:aa:4b:e5:fa:79:51:00:65:9d:a7:
         ad:c3:36:fe:88:8d:10:68:79:ba:76:54:c1:3a:df:8f:e6:4c:
         8f:0c:40:99:78:7c:9a:5f:11:20:8d:54:10:51:86:d6:cc:ad:
         69:f9:71:65:cf:25:22:67:20:a1:91:56:d8:0c:b1:ba:89:39:
         8c:20:58:0b:f8:16:29:3c:35:e2:a5:41:f1:9f:4c:d0:fa:6e:
         ff:7d:91:db:89:ca:56:d6:7e:c5:ef:2e:c4:12:ea:b9:2c:c3:
         3e:69:27:b8:3c:1f:6f:b6:c1:2b:07:18:d5:ae:21:91:92:bf:
         b1:d0:61:b8:b8:ad:88:27:e3:f7:6f:99:47:67:17:a2:e9:9a:
         7d:66:6a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:02:14 2024 by rpki-client on console-ams.rpki-client.org